WID-SEC-W-2022-1912
Vulnerability from csaf_certbund - Published: 2020-08-17 22:00 - Updated: 2025-02-23 23:00Summary
Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: JBoss Enterprise Application Platform ist eine skalierbare Plattform für Java-Anwendungen, inklusive JBoss Application Server, JBoss Hibernate und Boss Seam.
Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um Code zur Ausführung zu bringen, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.
Betroffene Betriebssysteme: - Linux
References
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "JBoss Enterprise Application Platform ist eine skalierbare Plattform f\u00fcr Java-Anwendungen, inklusive JBoss Application Server, JBoss Hibernate und Boss Seam.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um Code zur Ausf\u00fchrung zu bringen, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2022-1912 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2020/wid-sec-w-2022-1912.json"
},
{
"category": "self",
"summary": "WID-SEC-2022-1912 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1912"
},
{
"category": "external",
"summary": "RedHat Security Advisory vom 2020-08-17",
"url": "https://access.redhat.com/errata/RHSA-2020:3461"
},
{
"category": "external",
"summary": "RedHat Security Advisory vom 2020-08-17",
"url": "https://access.redhat.com/errata/RHSA-2020:3462"
},
{
"category": "external",
"summary": "RedHat Security Advisory vom 2020-08-17",
"url": "https://access.redhat.com/errata/RHSA-2020:3463"
},
{
"category": "external",
"summary": "RedHat Security Advisory vom 2020-08-17",
"url": "https://access.redhat.com/errata/RHSA-2020:3464"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:3501 vom 2020-08-18",
"url": "https://access.redhat.com/errata/RHSA-2020:3501"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:3585 vom 2020-08-31",
"url": "https://access.redhat.com/errata/RHSA-2020:3585"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:3539 vom 2020-09-02",
"url": "https://access.redhat.com/errata/RHSA-2020:3539"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:3642 vom 2020-09-07",
"url": "https://access.redhat.com/errata/RHSA-2020:3642"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:3637 vom 2020-09-07",
"url": "https://access.redhat.com/errata/RHSA-2020:3637"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:3639 vom 2020-09-07",
"url": "https://access.redhat.com/errata/RHSA-2020:3639"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:3638 vom 2020-09-07",
"url": "https://access.redhat.com/errata/RHSA-2020:3638"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:3779 vom 2020-09-17",
"url": "https://access.redhat.com/errata/RHSA-2020:3779"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:3806 vom 2020-09-23",
"url": "https://access.redhat.com/errata/RHSA-2020:3806"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:2832-1 vom 2020-10-02",
"url": "http://lists.suse.com/pipermail/sle-security-updates/2020-October/007517.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-4575-1 vom 2020-10-14",
"url": "https://usn.ubuntu.com/4575-1/"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:4252 vom 2020-10-14",
"url": "https://access.redhat.com/errata/RHSA-2020:4252"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:4960 vom 2020-11-05",
"url": "https://access.redhat.com/errata/RHSA-2020:4960"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:4961 vom 2020-11-05",
"url": "https://access.redhat.com/errata/RHSA-2020:4961"
},
{
"category": "external",
"summary": "Hitachi Vulnerability Information HITACHI-SEC-2020-136 vom 2020-12-11",
"url": "https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2020-136/index.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:5568 vom 2020-12-16",
"url": "https://access.redhat.com/errata/RHSA-2020:5568"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:0885 vom 2021-03-16",
"url": "https://access.redhat.com/errata/RHSA-2021:0885"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:0872 vom 2021-03-16",
"url": "https://access.redhat.com/errata/RHSA-2021:0872"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:0873 vom 2021-03-16",
"url": "https://access.redhat.com/errata/RHSA-2021:0873"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:0874 vom 2021-03-16",
"url": "https://access.redhat.com/errata/RHSA-2021:0874"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:0974 vom 2021-03-23",
"url": "https://access.redhat.com/errata/RHSA-2021:0974"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:2210 vom 2021-06-02",
"url": "https://access.redhat.com/errata/RHSA-2021:2210"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:2755 vom 2021-07-15",
"url": "https://access.redhat.com/errata/RHSA-2021:2755"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:3140 vom 2021-08-11",
"url": "https://access.redhat.com/errata/RHSA-2021:3140"
},
{
"category": "external",
"summary": "Hitachi Vulnerability Information HITACHI-SEC-2022-136 vom 2022-11-01",
"url": "https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2022-136/index.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:1746 vom 2025-02-24",
"url": "https://access.redhat.com/errata/RHSA-2025:1746"
}
],
"source_lang": "en-US",
"title": "Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-02-23T23:00:00.000+00:00",
"generator": {
"date": "2025-02-24T09:10:42.470+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.12"
}
},
"id": "WID-SEC-W-2022-1912",
"initial_release_date": "2020-08-17T22:00:00.000+00:00",
"revision_history": [
{
"date": "2020-08-17T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2020-08-18T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2020-08-31T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2020-09-01T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2020-09-07T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2020-09-17T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2020-09-23T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2020-10-04T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2020-10-13T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2020-11-05T23:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2020-12-10T23:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von HITACHI aufgenommen"
},
{
"date": "2020-12-16T23:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2021-03-16T23:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2021-03-23T23:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2021-06-03T22:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2021-07-15T22:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2021-08-11T22:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2022-10-31T23:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von HITACHI aufgenommen"
},
{
"date": "2025-02-23T23:00:00.000+00:00",
"number": "19",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "19"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Hitachi Ops Center",
"product": {
"name": "Hitachi Ops Center",
"product_id": "T017562",
"product_identification_helper": {
"cpe": "cpe:/a:hitachi:ops_center:-"
}
}
},
{
"category": "product_name",
"name": "Hitachi Network Attached Storage",
"product": {
"name": "Hitachi Network Attached Storage",
"product_id": "T011055",
"product_identification_helper": {
"cpe": "cpe:/h:hitachi:virtual_storage_platform:-"
}
}
}
],
"category": "vendor",
"name": "Hitachi"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c7.3.2",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform \u003c7.3.2",
"product_id": "130262"
}
},
{
"category": "product_version",
"name": "7.3.2",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 7.3.2",
"product_id": "130262-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:4.2.0"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.1.9",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform \u003c7.1.9",
"product_id": "T041370"
}
},
{
"category": "product_version",
"name": "7.1.9",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 7.1.9",
"product_id": "T041370-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.1.9"
}
}
}
],
"category": "product_name",
"name": "JBoss Enterprise Application Platform"
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-14900",
"product_status": {
"known_affected": [
"130262",
"T002207",
"T041370",
"67646",
"T000126",
"T011055",
"T017562"
]
},
"release_date": "2020-08-17T22:00:00.000+00:00",
"title": "CVE-2019-14900"
},
{
"cve": "CVE-2020-10672",
"product_status": {
"known_affected": [
"130262",
"T002207",
"T041370",
"67646",
"T000126",
"T011055",
"T017562"
]
},
"release_date": "2020-08-17T22:00:00.000+00:00",
"title": "CVE-2020-10672"
},
{
"cve": "CVE-2020-10673",
"product_status": {
"known_affected": [
"130262",
"T002207",
"T041370",
"67646",
"T000126",
"T011055",
"T017562"
]
},
"release_date": "2020-08-17T22:00:00.000+00:00",
"title": "CVE-2020-10673"
},
{
"cve": "CVE-2020-10683",
"product_status": {
"known_affected": [
"130262",
"T002207",
"T041370",
"67646",
"T000126",
"T011055",
"T017562"
]
},
"release_date": "2020-08-17T22:00:00.000+00:00",
"title": "CVE-2020-10683"
},
{
"cve": "CVE-2020-10687",
"product_status": {
"known_affected": [
"130262",
"T002207",
"T041370",
"67646",
"T000126",
"T011055",
"T017562"
]
},
"release_date": "2020-08-17T22:00:00.000+00:00",
"title": "CVE-2020-10687"
},
{
"cve": "CVE-2020-10693",
"product_status": {
"known_affected": [
"130262",
"T002207",
"T041370",
"67646",
"T000126",
"T011055",
"T017562"
]
},
"release_date": "2020-08-17T22:00:00.000+00:00",
"title": "CVE-2020-10693"
},
{
"cve": "CVE-2020-10714",
"product_status": {
"known_affected": [
"130262",
"T002207",
"T041370",
"67646",
"T000126",
"T011055",
"T017562"
]
},
"release_date": "2020-08-17T22:00:00.000+00:00",
"title": "CVE-2020-10714"
},
{
"cve": "CVE-2020-10718",
"product_status": {
"known_affected": [
"130262",
"T002207",
"T041370",
"67646",
"T000126",
"T011055",
"T017562"
]
},
"release_date": "2020-08-17T22:00:00.000+00:00",
"title": "CVE-2020-10718"
},
{
"cve": "CVE-2020-10740",
"product_status": {
"known_affected": [
"130262",
"T002207",
"T041370",
"67646",
"T000126",
"T011055",
"T017562"
]
},
"release_date": "2020-08-17T22:00:00.000+00:00",
"title": "CVE-2020-10740"
},
{
"cve": "CVE-2020-14297",
"product_status": {
"known_affected": [
"130262",
"T002207",
"T041370",
"67646",
"T000126",
"T011055",
"T017562"
]
},
"release_date": "2020-08-17T22:00:00.000+00:00",
"title": "CVE-2020-14297"
},
{
"cve": "CVE-2020-1710",
"product_status": {
"known_affected": [
"130262",
"T002207",
"T041370",
"67646",
"T000126",
"T011055",
"T017562"
]
},
"release_date": "2020-08-17T22:00:00.000+00:00",
"title": "CVE-2020-1710"
},
{
"cve": "CVE-2020-1748",
"product_status": {
"known_affected": [
"130262",
"T002207",
"T041370",
"67646",
"T000126",
"T011055",
"T017562"
]
},
"release_date": "2020-08-17T22:00:00.000+00:00",
"title": "CVE-2020-1748"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…